system service exception BSOD

S

stirfriedsushi

New Member
I am getting a BSOD while doing absolutely nothing at all. I used to have this issue when i had overclocked and fiddled with the timings on my ram, but i hadn't had it for 5 days with the machine being constantly on. I just got it again and I am sick of dealing with this without knowing what it actually is. I don't know how to troubleshoot these things, my knowledge is slightly above basic.

Here is what I know, I recently replaced my ram, and the tech support told me that my motherboard didn't like to have it's settings changed. When i did, i got overclock errors and it crashed. He suggested that i relax my timings to 8,7,7,20,2t, or 8,8,8,24,2t and see what happened. I didn't see the necessity of testing this as stock settings seemed to be working just fine.

my specs are as follows
foxconn Blackops motherboard
Wolfdale e8500 processor
HD 4850 gfx card
ram = Patriot Viper 4GB 240-Pin DDR3 1333 (PC3 10666) Dual Channel PVS34G1333LLK

running Vista ultimate sp1.

attached is the minidump from my last crash.

Other info, I have run memtest extensively and have gotten 0 errors on 9 passes, with 3 different settings for timings and voltage.

Can anyone tell me what the problem could be? I would be most appreciative.
 

Attachments

  • Mini072409-01.zip
    22.2 KB · Views: 80

My Computer

System One

Update, here is some more info if it helps.

These are all the event viewer ID numbers from the errors around the time of the crash.

1101
6008
15016
10
7000

hope it helps
 

My Computer

System One

BSOD's are tricky things - and System Service Exception errors are very frustrating to isolate. People look at posts to see if there's something that they can contribute - if they don't have anything, they don't post.

But, I'll take a stab at this.

First, if you're still overclocking, the first step is to reset things to default and see if it still BSOD's. If it does, then it's not an overclocking issue. BUT, please leave it "stock" until we isolate the cause.

Next, here's some stuff to get you started: BSOD troubleshooting preliminaries - Vox I know it's a whole bunch of stuff to do - but plug away at it while we're working on the BSOD errors. I've spent weeks troubleshooting BSOD's only to find that it was a hardware issue. I understand that the Memtest has already passed for you (this is a reminder to me :)

Next, please update these drivers (as they are older and may be causing issues). To do this, search Google for the filename and figure out what device/program that they belong to, then uninstall the old device/program and install the new one:
abd0ex1g.SYS Sat Nov 18 03:33:22 2006
HDAudBus.sys Tue Nov 27 18:24:06 2007
b57nd60a.sys Mon Feb 26 17:50:43 2007
HdAudio.sys Wed Nov 01 21:48:10 2006
SSPORT.sys Thu Aug 11 19:07:32 2005
Click to expand...
The BSOD points to afd.sys as the cause. This is related to the Winsock stack on your system and is a Windows file. When analyzing BSOD's we generally disregard issues with Windows files as they aren't usually the cause. But, it does give us information that this a networking related BSOD (although it could be malware related also).

So, I'd suggest updating your networking drivers and any other programs/utilities that are using your network (things such as uTorrent come to mind). If this doesn't fix the BSOD's, then we'll move on to other tests to see if we can isolate the thing causing it.

Finally, here's the analysis of the dump file:
Code: 
Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\FUBAR-RC1-Desktop\TempDUMP\DATA\01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2008/Windows Vista Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6001.18145.amd64fre.vistasp1_gdr.080917-1612
Machine Name:
Kernel base = 0xfffff800`01e4c000 PsLoadedModuleList = 0xfffff800`02011db0
Debug session time: Fri Jul 24 11:49:20.737 2009 (GMT-4)
System Uptime: 7 days 20:40:14.143
Loading Kernel Symbols
...............................................................
................................................................
.......................
Loading User Symbols
Loading unloaded module list
...........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff80001eaeb22, fffffa600e452d40, 0}

Probably caused by : afd.sys ( afd!AfdEnumNetworkEvents+9d )

Followup: MachineOwner
---------

1: kd> !thread;!analyze -v;r;kv;lmtn;lmtsmn;.bugcheck;.logclose;q
GetPointerFromAddress: unable to read from fffff80002075000
THREAD fffffa800776fbb0  Cid 0740.0860  Teb: 000000007efd5000 Win32Thread: fffff900c3f7a010 RUNNING on processor 1
Not impersonating
GetUlongFromAddress: unable to read from fffff80001ff3be0
Owning Process            fffffa8007714040       Image:         uTorrent.exe
Attached Process          N/A            Image:         N/A
fffff78000000000: Unable to get shared data
Wait Start TickCount      43539089     
Context Switch Count      40490724                 LargeStack
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
UserTime                  00:00:00.000
KernelTime                00:00:00.000
Win32 Start Address 0x000000000042183b
Stack Init fffffa600e453db0 Current fffffa600e453230
Base fffffa600e454000 Limit fffffa600e44c000 Call 0
Priority 10 BasePriority 8 PriorityDecrement 0 IoPriority 2 PagePriority 5
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffffa60`0e452388 fffff800`01ea10ee : 00000000`0000003b 00000000`c0000005 fffff800`01eaeb22 fffffa60`0e452d40 : nt!KeBugCheckEx
fffffa60`0e452390 fffff800`01ea0abc : fffffa60`0e453368 fffffa60`0e452d40 fffff800`01fa3b4c fffff800`01e4c000 : nt!KiBugCheckDispatch+0x6e
fffffa60`0e4524d0 fffff800`01eb46bd : 00000000`00000000 fffff800`01e4c000 fffffa60`0e454000 fffff800`0204fdf4 : nt!KiSystemServiceHandler+0x7c
fffffa60`0e452510 fffff800`01ebbcff : fffffa60`00000001 00000000`00000001 fffffa80`00000000 fffffa60`0e453c20 : nt!RtlpExecuteHandlerForException+0xd
fffffa60`0e452540 fffff800`01e78d83 : fffffa60`0e453368 fffffa60`0e452d40 00000000`00000000 fffffa60`0e453410 : nt!RtlDispatchException+0x22f
fffffa60`0e452c30 fffff800`01ea11a9 : fffffa60`0e453368 00000000`00000000 fffffa60`0e453410 fffffa60`0e453a78 : nt!KiDispatchException+0xc3
fffffa60`0e453230 fffff800`01e9fd8d : 00000000`00000000 fffff800`01ea66ba 00000000`00000801 00000000`000000c1 : nt!KiExceptionDispatch+0xa9
fffffa60`0e453410 fffff800`01eaeb22 : fffffa80`077756b0 fffffa80`0773c870 fffffa80`0773c970 fffffa80`076f18b0 : nt!KiGeneralProtectionFault+0xcd (TrapFrame @ fffffa60`0e453410)
fffffa60`0e4535a0 fffffa60`0394c1cd : 00000000`00000000 fffffa80`077136c0 fffffa80`0770d880 fffffa80`076f2260 : nt!KxWaitForLockOwnerShip+0x12
fffffa60`0e4535d0 fffffa60`03937060 : fffffa60`0e453a70 fffffa60`0e453940 00000000`00000000 fffffa80`045355f0 : afd!AfdEnumNetworkEvents+0x9d
fffffa60`0e453670 fffff800`0212509b : 00000000`00000100 fffffa80`045355f0 00000000`00000001 00000000`00000101 : afd!AfdFastIoDeviceControl+0x1050
fffffa60`0e4539f0 fffff800`0213dfe6 : 00000000`000001cc 00000000`00000288 00000000`00000001 00000000`00000000 : nt!IopXxxControlFile+0x35b
fffffa60`0e453b40 fffff800`01ea0df3 : 00000000`ff4f91cc fffff800`01f1cc6f 00000000`00000002 fffffa60`0e453ca0 : nt!NtDeviceIoControlFile+0x56
fffffa60`0e453bb0 00000000`752a385e : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffffa60`0e453c20)
00000000`003af0a8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x752a385e

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80001eaeb22, Address of the exception record for the exception that caused the bugcheck
Arg3: fffffa600e452d40, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!KxWaitForLockOwnerShip+12
fffff800`01eaeb22 48890a          mov     qword ptr [rdx],rcx

CONTEXT:  fffffa600e452d40 -- (.cxr 0xfffffa600e452d40)
.cxr 0xfffffa600e452d40
rax=0000000000000000 rbx=0000000000000000 rcx=fffffa600e453610
rdx=1000000000000000 rsi=fffffa600e453a78 rdi=fffffa600e453610
rip=fffff80001eaeb22 rsp=fffffa600e4535a0 rbp=fffffa600e453ca0
 r8=fffffa600e453610  r9=0000000000000000 r10=0000000000000000
r11=fffffa600e453668 r12=0000000000000001 r13=0000000000000000
r14=0000000000000001 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286
nt!KxWaitForLockOwnerShip+0x12:
fffff800`01eaeb22 48890a          mov     qword ptr [rdx],rcx ds:002b:10000000`00000000=????????????????
.cxr
Resetting default scope

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  uTorrent.exe

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffffa600394c1cd to fffff80001eaeb22

STACK_TEXT:  
fffffa60`0e4535a0 fffffa60`0394c1cd : 00000000`00000000 fffffa80`077136c0 fffffa80`0770d880 fffffa80`076f2260 : nt!KxWaitForLockOwnerShip+0x12
fffffa60`0e4535d0 fffffa60`03937060 : fffffa60`0e453a70 fffffa60`0e453940 00000000`00000000 fffffa80`045355f0 : afd!AfdEnumNetworkEvents+0x9d
fffffa60`0e453670 fffff800`0212509b : 00000000`00000100 fffffa80`045355f0 00000000`00000001 00000000`00000101 : afd!AfdFastIoDeviceControl+0x1050
fffffa60`0e4539f0 fffff800`0213dfe6 : 00000000`000001cc 00000000`00000288 00000000`00000001 00000000`00000000 : nt!IopXxxControlFile+0x35b
fffffa60`0e453b40 fffff800`01ea0df3 : 00000000`ff4f91cc fffff800`01f1cc6f 00000000`00000002 fffffa60`0e453ca0 : nt!NtDeviceIoControlFile+0x56
fffffa60`0e453bb0 00000000`752a385e : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`003af0a8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x752a385e


FOLLOWUP_IP: 
afd!AfdEnumNetworkEvents+9d
fffffa60`0394c1cd 8b473c          mov     eax,dword ptr [rdi+3Ch]

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  afd!AfdEnumNetworkEvents+9d

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: afd

IMAGE_NAME:  afd.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  47919ad7

STACK_COMMAND:  .cxr 0xfffffa600e452d40 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_afd!AfdEnumNetworkEvents+9d

BUCKET_ID:  X64_0x3B_afd!AfdEnumNetworkEvents+9d

Followup: MachineOwner
---------

rax=fffffa600e452490 rbx=fffffa600e453c20 rcx=000000000000003b
rdx=00000000c0000005 rsi=fffff80001ea0df3 rdi=fffff8000204fdf4
rip=fffff80001ea1350 rsp=fffffa600e452388 rbp=fffffa600e453368
 r8=fffff80001eaeb22  r9=fffffa600e452d40 r10=0000000000000000
r11=0000000000000001 r12=fffffa600e44c000 r13=fffffa600e454000
r14=fffff80001e4c000 r15=fffff80001f9a4ec
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000286
nt!KeBugCheckEx:
fffff800`01ea1350 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:fffffa60`0e452390=000000000000003b
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffffa60`0e452388 fffff800`01ea10ee : 00000000`0000003b 00000000`c0000005 fffff800`01eaeb22 fffffa60`0e452d40 : nt!KeBugCheckEx
fffffa60`0e452390 fffff800`01ea0abc : fffffa60`0e453368 fffffa60`0e452d40 fffff800`01fa3b4c fffff800`01e4c000 : nt!KiBugCheckDispatch+0x6e
fffffa60`0e4524d0 fffff800`01eb46bd : 00000000`00000000 fffff800`01e4c000 fffffa60`0e454000 fffff800`0204fdf4 : nt!KiSystemServiceHandler+0x7c
fffffa60`0e452510 fffff800`01ebbcff : fffffa60`00000001 00000000`00000001 fffffa80`00000000 fffffa60`0e453c20 : nt!RtlpExecuteHandlerForException+0xd
fffffa60`0e452540 fffff800`01e78d83 : fffffa60`0e453368 fffffa60`0e452d40 00000000`00000000 fffffa60`0e453410 : nt!RtlDispatchException+0x22f
fffffa60`0e452c30 fffff800`01ea11a9 : fffffa60`0e453368 00000000`00000000 fffffa60`0e453410 fffffa60`0e453a78 : nt!KiDispatchException+0xc3
fffffa60`0e453230 fffff800`01e9fd8d : 00000000`00000000 fffff800`01ea66ba 00000000`00000801 00000000`000000c1 : nt!KiExceptionDispatch+0xa9
fffffa60`0e453410 fffff800`01eaeb22 : fffffa80`077756b0 fffffa80`0773c870 fffffa80`0773c970 fffffa80`076f18b0 : nt!KiGeneralProtectionFault+0xcd (TrapFrame @ fffffa60`0e453410)
fffffa60`0e4535a0 fffffa60`0394c1cd : 00000000`00000000 fffffa80`077136c0 fffffa80`0770d880 fffffa80`076f2260 : nt!KxWaitForLockOwnerShip+0x12
fffffa60`0e4535d0 fffffa60`03937060 : fffffa60`0e453a70 fffffa60`0e453940 00000000`00000000 fffffa80`045355f0 : afd!AfdEnumNetworkEvents+0x9d
fffffa60`0e453670 fffff800`0212509b : 00000000`00000100 fffffa80`045355f0 00000000`00000001 00000000`00000101 : afd!AfdFastIoDeviceControl+0x1050
fffffa60`0e4539f0 fffff800`0213dfe6 : 00000000`000001cc 00000000`00000288 00000000`00000001 00000000`00000000 : nt!IopXxxControlFile+0x35b
fffffa60`0e453b40 fffff800`01ea0df3 : 00000000`ff4f91cc fffff800`01f1cc6f 00000000`00000002 fffffa60`0e453ca0 : nt!NtDeviceIoControlFile+0x56
fffffa60`0e453bb0 00000000`752a385e : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffffa60`0e453c20)
00000000`003af0a8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x752a385e
start             end                 module name
fffff800`01e06000 fffff800`01e4c000   hal      hal.dll      Sat Jan 19 02:55:25 2008 (4791ACED)
fffff800`01e4c000 fffff800`02364000   nt       ntkrnlmp.exe Wed Sep 17 22:17:25 2008 (48D1BA35)
fffff960`00090000 fffff960`00341000   win32k   win32k.sys   unavailable (00000000)
fffff960`004a0000 fffff960`004aa000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff960`00690000 fffff960`006a1000   cdd      cdd.dll      unavailable (00000000)
fffffa60`0060b000 fffffa60`00615000   kdcom    kdcom.dll    Sat Jan 19 02:58:25 2008 (4791ADA1)
fffffa60`00615000 fffffa60`00642000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Jan 19 02:56:17 2008 (4791AD21)
fffffa60`00642000 fffffa60`00656000   PSHED    PSHED.dll    Sat Jan 19 02:58:13 2008 (4791AD95)
fffffa60`00656000 fffffa60`006b3000   CLFS     CLFS.SYS     Sat Jan 19 00:53:58 2008 (47919076)
fffffa60`006b3000 fffffa60`00765000   CI       CI.dll       Fri Feb 22 00:20:54 2008 (47BE5BB6)
fffffa60`00765000 fffffa60`007ab000   fltmgr   fltmgr.sys   Sat Jan 19 00:54:10 2008 (47919082)
fffffa60`007ab000 fffffa60`007f2000   usbhub   usbhub.sys   Sat Jan 19 01:34:13 2008 (479199E5)
fffffa60`0080b000 fffffa60`008e5000   Wdf01000 Wdf01000.sys Sat Jan 19 01:33:27 2008 (479199B7)
fffffa60`008e5000 fffffa60`008f3000   WDFLDR   WDFLDR.SYS   Sat Jan 19 01:32:33 2008 (47919981)
fffffa60`008f3000 fffffa60`00907000   volmgr   volmgr.sys   Sat Jan 19 01:29:12 2008 (479198B8)
fffffa60`00907000 fffffa60`0096d000   volmgrx  volmgrx.sys  Sat Jan 19 01:29:45 2008 (479198D9)
fffffa60`0096d000 fffffa60`0097d000   PCIIDEX  PCIIDEX.SYS  Sat Jan 19 01:28:53 2008 (479198A5)
fffffa60`0097d000 fffffa60`00990000   mountmgr mountmgr.sys Sat Jan 19 01:28:01 2008 (47919871)
fffffa60`00990000 fffffa60`00998000   atapi    atapi.sys    Sat Jan 19 01:28:49 2008 (479198A1)
fffffa60`00998000 fffffa60`009bc000   ataport  ataport.SYS  Sat Jan 19 01:28:52 2008 (479198A4)
fffffa60`009bc000 fffffa60`009d0000   fileinfo fileinfo.sys Sat Jan 19 01:05:23 2008 (47919323)
fffffa60`009d0000 fffffa60`009eb000   wanarp   wanarp.sys   Sat Jan 19 01:37:35 2008 (47919AAF)
fffffa60`00a06000 fffffa60`00b18000   sptd     sptd.sys     Sun Nov 19 12:18:45 2006 (456091F5)
fffffa60`00b18000 fffffa60`00b21000   WMILIB   WMILIB.SYS   Sat Jan 19 01:33:45 2008 (479199C9)
fffffa60`00b21000 fffffa60`00b4f000   SCSIPORT SCSIPORT.SYS Sat Jan 19 01:28:52 2008 (479198A4)
fffffa60`00b4f000 fffffa60`00ba5000   acpi     acpi.sys     Sat Jan 19 01:02:45 2008 (47919285)
fffffa60`00ba5000 fffffa60`00baf000   msisadrv msisadrv.sys Sat Jan 19 01:02:50 2008 (4791928A)
fffffa60`00baf000 fffffa60`00bdf000   pci      pci.sys      Sat Jan 19 01:02:57 2008 (47919291)
fffffa60`00bdf000 fffffa60`00bf4000   partmgr  partmgr.sys  Sat Jan 19 01:29:14 2008 (479198BA)
fffffa60`00bf4000 fffffa60`00bfb000   pciide   pciide.sys   Thu Nov 02 05:38:14 2006 (4549BC86)
fffffa60`00c0d000 fffffa60`00c92000   ksecdd   ksecdd.sys   Sat Jan 19 01:16:38 2008 (479195C6)
fffffa60`00c92000 fffffa60`00ce2000   msrpc    msrpc.sys    Sat Jan 19 01:27:01 2008 (47919835)
fffffa60`00ce2000 fffffa60`00d3a000   NETIO    NETIO.SYS    Sat Jan 19 01:37:27 2008 (47919AA7)
fffffa60`00d3a000 fffffa60`00d66000   CLASSPNP CLASSPNP.SYS Sat Jan 19 01:28:53 2008 (479198A5)
fffffa60`00d79000 fffffa60`00d8c000   intelppm intelppm.sys Sat Jan 19 00:52:45 2008 (4791902D)
fffffa60`00d8c000 fffffa60`00dc4000   msiscsi  msiscsi.sys  Sat Jan 19 01:30:31 2008 (47919907)
fffffa60`00dc4000 fffffa60`00dcf000   mssmbios mssmbios.sys Sat Jan 19 01:02:54 2008 (4791928E)
fffffa60`00dcf000 fffffa60`00ddf000   umbus    umbus.sys    Sat Jan 19 01:34:16 2008 (479199E8)
fffffa60`00ddf000 fffffa60`00dea000   flpydisk flpydisk.sys Sat Jan 19 01:28:45 2008 (4791989D)
fffffa60`00e09000 fffffa60`00fcc000   ndis     ndis.sys     Sat Jan 19 01:37:13 2008 (47919A99)
fffffa60`00fcc000 fffffa60`00ff5000   fvevol   fvevol.sys   Sat Jan 19 00:52:29 2008 (4791901D)
fffffa60`00ff5000 fffffa60`00ffe000   tunmp    tunmp.sys    Sat Jan 19 01:36:30 2008 (47919A6E)
fffffa60`01000000 fffffa60`0100c000   tunnel   tunnel.sys   Sat Jan 19 01:36:44 2008 (47919A7C)
fffffa60`0100f000 fffffa60`01183000   tcpip    tcpip.sys    Sat Apr 26 02:33:23 2008 (4812CCB3)
fffffa60`01183000 fffffa60`011af000   fwpkclnt fwpkclnt.sys Sat Jan 19 01:36:43 2008 (47919A7B)
fffffa60`011af000 fffffa60`011db000   ecache   ecache.sys   Sat Jan 19 01:30:39 2008 (4791990F)
fffffa60`01200000 fffffa60`01384000   Ntfs     Ntfs.sys     Sat Jan 19 00:55:29 2008 (479190D1)
fffffa60`01384000 fffffa60`013c8000   volsnap  volsnap.sys  Sat Jan 19 01:29:47 2008 (479198DB)
fffffa60`013c8000 fffffa60`013d0000   spldr    spldr.sys    Thu Jun 21 20:57:56 2007 (467B1E94)
fffffa60`013d0000 fffffa60`013e2000   mup      mup.sys      Sat Jan 19 00:54:18 2008 (4791908A)
fffffa60`013e2000 fffffa60`013f6000   disk     disk.sys     Sat Jan 19 01:29:02 2008 (479198AE)
fffffa60`013f6000 fffffa60`01400000   crcdisk  crcdisk.sys  Sat Jan 19 01:30:12 2008 (479198F4)
fffffa60`02402000 fffffa60`0245f000   storport storport.sys Sat Jan 19 01:29:09 2008 (479198B5)
fffffa60`0245f000 fffffa60`0246c000   TDI      TDI.SYS      Sat Jan 19 01:38:11 2008 (47919AD3)
fffffa60`0246c000 fffffa60`0248f000   rasl2tp  rasl2tp.sys  Sat Jan 19 01:37:33 2008 (47919AAD)
fffffa60`0248f000 fffffa60`0249b000   ndistapi ndistapi.sys Sat Jan 19 01:37:22 2008 (47919AA2)
fffffa60`0249b000 fffffa60`024cc000   ndiswan  ndiswan.sys  Sat Jan 19 01:37:33 2008 (47919AAD)
fffffa60`024cc000 fffffa60`024dc000   raspppoe raspppoe.sys Sat Jan 19 01:37:30 2008 (47919AAA)
fffffa60`024dc000 fffffa60`024fa000   raspptp  raspptp.sys  Sat Jan 19 01:37:34 2008 (47919AAE)
fffffa60`024fa000 fffffa60`02512000   rassstp  rassstp.sys  Sat Jan 19 01:37:42 2008 (47919AB6)
fffffa60`02512000 fffffa60`025ac000   rdpdr    rdpdr.sys    Sat Jan 19 01:43:38 2008 (47919C1A)
fffffa60`025ac000 fffffa60`025be000   termdd   termdd.sys   Sat Jan 19 01:42:03 2008 (47919BBB)
fffffa60`025be000 fffffa60`025ca000   mouclass mouclass.sys Sat Jan 19 01:28:05 2008 (47919875)
fffffa60`025ca000 fffffa60`025cb480   swenum   swenum.sys   Thu Nov 02 05:37:33 2006 (4549BC5D)
fffffa60`025cc000 fffffa60`02600000   ks       ks.sys       Sat Jan 19 01:28:24 2008 (47919888)
fffffa60`02606000 fffffa60`02b52000   atikmdag atikmdag.sys Mon Mar 16 16:42:14 2009 (49BEB9A6)
fffffa60`02b52000 fffffa60`02b6f000   serial   serial.sys   Sat Jan 19 01:28:41 2008 (47919899)
fffffa60`02b6f000 fffffa60`02b7b000   irsir    irsir.sys    Sat Jan 19 01:36:11 2008 (47919A5B)
fffffa60`02b7b000 fffffa60`02b84000   irenum   irenum.sys   Sat Jan 19 01:36:07 2008 (47919A57)
fffffa60`02b9a000 fffffa60`02ba8000   kbdclass kbdclass.sys Sat Jan 19 01:28:05 2008 (47919875)
fffffa60`02ba8000 fffffa60`02bfe000   abd0ex1g abd0ex1g.SYS Sat Nov 18 03:33:22 2006 (455EC552)
fffffa60`02c00000 fffffa60`02cdf000   dxgkrnl  dxgkrnl.sys  Fri Aug 01 21:19:59 2008 (4893B63F)
fffffa60`02cdf000 fffffa60`02cee000   watchdog watchdog.sys Sat Jan 19 01:07:23 2008 (4791939B)
fffffa60`02cee000 fffffa60`02d01000   HDAudBus HDAudBus.sys Tue Nov 27 18:24:06 2007 (474CA716)
fffffa60`02d01000 fffffa60`02d0d000   usbuhci  usbuhci.sys  Sat Jan 19 01:33:56 2008 (479199D4)
fffffa60`02d0d000 fffffa60`02d53000   USBPORT  USBPORT.SYS  Sat Jan 19 01:34:00 2008 (479199D8)
fffffa60`02d53000 fffffa60`02d64000   usbehci  usbehci.sys  Sat Jan 19 01:33:57 2008 (479199D5)
fffffa60`02d64000 fffffa60`02d80000   cdrom    cdrom.sys    Sat Jan 19 01:29:04 2008 (479198B0)
fffffa60`02d80000 fffffa60`02d8b000   GEARAspiWDM GEARAspiWDM.sys Thu Mar 19 11:34:13 2009 (49C265F5)
fffffa60`02d8b000 fffffa60`02dc4000   b57nd60a b57nd60a.sys Mon Feb 26 17:50:43 2007 (45E36443)
fffffa60`02dc4000 fffffa60`02dd5a00   ohci1394 ohci1394.sys Sat Jan 19 01:34:08 2008 (479199E0)
fffffa60`02dd6000 fffffa60`02de5f00   1394BUS  1394BUS.SYS  Sat Jan 19 01:34:04 2008 (479199DC)
fffffa60`02de6000 fffffa60`02df3000   fdc      fdc.sys      Sat Jan 19 01:28:45 2008 (4791989D)
fffffa60`02df3000 fffffa60`02dff000   serenum  serenum.sys  Sat Jan 19 01:28:36 2008 (47919894)
fffffa60`0380f000 fffffa60`03858000   HdAudio  HdAudio.sys  Wed Nov 01 21:48:10 2006 (45494E5A)
fffffa60`03858000 fffffa60`03893000   portcls  portcls.sys  Sat Jan 19 01:33:58 2008 (479199D6)
fffffa60`03893000 fffffa60`038b6000   drmk     drmk.sys     Sat Jan 19 02:20:04 2008 (4791A4A4)
fffffa60`038b6000 fffffa60`038bb180   ksthunk  ksthunk.sys  Sat Jan 19 01:28:14 2008 (4791987E)
fffffa60`038bc000 fffffa60`038cd000   Npfs     Npfs.SYS     Sat Jan 19 00:53:57 2008 (47919075)
fffffa60`038cd000 fffffa60`038ea000   tdx      tdx.sys      Sat Jan 19 01:36:53 2008 (47919A85)
fffffa60`038ea000 fffffa60`03905000   smb      smb.sys      Sat Jan 19 01:36:17 2008 (47919A61)
fffffa60`03905000 fffffa60`03912000   epfwtdir epfwtdir.sys Thu Mar 13 11:27:44 2008 (47D947F0)
fffffa60`03912000 fffffa60`0397f000   afd      afd.sys      Sat Jan 19 01:38:15 2008 (47919AD7)
fffffa60`0397f000 fffffa60`039c3000   netbt    netbt.sys    Sat Jan 19 01:36:24 2008 (47919A68)
fffffa60`039c3000 fffffa60`039e1000   pacer    pacer.sys    Fri Apr 04 21:55:46 2008 (47F6DC22)
fffffa60`039e1000 fffffa60`039f0000   netbios  netbios.sys  Sat Jan 19 01:36:35 2008 (47919A73)
fffffa60`03a07000 fffffa60`03b51800   RTKVHD64 RTKVHD64.sys Thu Feb 14 04:03:02 2008 (47B403C6)
fffffa60`03b52000 fffffa60`03b66000   NDProxy  NDProxy.SYS  Sat Jan 19 01:37:26 2008 (47919AA6)
fffffa60`03b66000 fffffa60`03b70000   Fs_Rec   Fs_Rec.SYS   Sat Jan 19 00:53:41 2008 (47919065)
fffffa60`03b70000 fffffa60`03b79000   Null     Null.SYS     Thu Nov 02 05:37:15 2006 (4549BC4B)
fffffa60`03b79000 fffffa60`03b8f000   i8042prt i8042prt.sys Sat Jan 19 01:28:08 2008 (47919878)
fffffa60`03b99000 fffffa60`03ba0b80   HIDPARSE HIDPARSE.SYS Sat Jan 19 01:33:51 2008 (479199CF)
fffffa60`03ba1000 fffffa60`03baf000   vga      vga.sys      Sat Jan 19 01:32:21 2008 (47919975)
fffffa60`03baf000 fffffa60`03bd4000   VIDEOPRT VIDEOPRT.SYS Sat Jan 19 01:32:25 2008 (47919979)
fffffa60`03bd4000 fffffa60`03bdd000   RDPCDD   RDPCDD.sys   Sat Jan 19 01:42:04 2008 (47919BBC)
fffffa60`03bdd000 fffffa60`03be6000   rdpencdd rdpencdd.sys Sat Jan 19 01:42:03 2008 (47919BBB)
fffffa60`03be6000 fffffa60`03bf1000   Msfs     Msfs.SYS     Sat Jan 19 00:53:55 2008 (47919073)
fffffa60`03bf1000 fffffa60`03bfa000   rasacd   rasacd.sys   Sat Jan 19 01:37:30 2008 (47919AAA)
fffffa60`03c08000 fffffa60`03c56000   rdbss    rdbss.sys    Sat Jan 19 00:55:09 2008 (479190BD)
fffffa60`03c56000 fffffa60`03c62000   nsiproxy nsiproxy.sys Sat Jan 19 01:36:45 2008 (47919A7D)
fffffa60`03c62000 fffffa60`03c6d000   easdrv   easdrv.sys   Thu Mar 13 11:39:03 2008 (47D94A97)
fffffa60`03c6d000 fffffa60`03ce3000   csc      csc.sys      Sat Jan 19 00:55:39 2008 (479190DB)
fffffa60`03ce3000 fffffa60`03d00000   dfsc     dfsc.sys     Sat Jan 19 00:54:16 2008 (47919088)
fffffa60`03d00000 fffffa60`03d0e000   crashdmp crashdmp.sys Sat Jan 19 01:28:59 2008 (479198AB)
fffffa60`03d0e000 fffffa60`03d1a000   dump_dumpata dump_dumpata.sys Sat Jan 19 01:28:54 2008 (479198A6)
fffffa60`03d1a000 fffffa60`03d22000   dump_atapi dump_atapi.sys Sat Jan 19 01:28:49 2008 (479198A1)
fffffa60`03d22000 fffffa60`03d35000   dump_dumpfve dump_dumpfve.sys Sat Jan 19 00:52:25 2008 (47919019)
fffffa60`03d35000 fffffa60`03d40000   usbprint usbprint.sys Sat Jan 19 02:10:56 2008 (4791A280)
fffffa60`03d40000 fffffa60`03d41e00   USBD     USBD.SYS     Sat Jan 19 01:33:53 2008 (479199D1)
fffffa60`03d42000 fffffa60`03d4e000   Dxapi    Dxapi.sys    Sat Jan 19 01:08:00 2008 (479193C0)
fffffa60`03d4e000 fffffa60`03d6a000   usbccgp  usbccgp.sys  Sat Jan 19 01:34:04 2008 (479199DC)
fffffa60`03d6a000 fffffa60`03d73000   hidusb   hidusb.sys   Sat Jan 19 01:33:54 2008 (479199D2)
fffffa60`03d73000 fffffa60`03d85000   HIDCLASS HIDCLASS.SYS Sat Jan 19 01:33:52 2008 (479199D0)
fffffa60`03d85000 fffffa60`03d8f000   kbdhid   kbdhid.sys   Sat Jan 19 01:28:10 2008 (4791987A)
fffffa60`03d8f000 fffffa60`03d9a000   mouhid   mouhid.sys   Sat Jan 19 01:28:10 2008 (4791987A)
fffffa60`03d9a000 fffffa60`03dad000   monitor  monitor.sys  Sat Jan 19 01:32:34 2008 (47919982)
fffffa60`03dad000 fffffa60`03dcf000   luafv    luafv.sys    Sat Jan 19 00:59:06 2008 (479191AA)
fffffa60`03dcf000 fffffa60`03df6000   mrxdav   mrxdav.sys   Sat Jan 19 00:55:28 2008 (479190D0)
fffffa60`05603000 fffffa60`0569d000   spsys    spsys.sys    Thu Jun 21 21:02:05 2007 (467B1F8D)
fffffa60`0569d000 fffffa60`056c0000   irda     irda.sys     Sat Jan 19 01:36:12 2008 (47919A5C)
fffffa60`056c0000 fffffa60`056d4000   lltdio   lltdio.sys   Sat Jan 19 01:35:48 2008 (47919A44)
fffffa60`056d4000 fffffa60`056ec000   rspndr   rspndr.sys   Sat Jan 19 01:35:48 2008 (47919A44)
fffffa60`056ec000 fffffa60`05787000   HTTP     HTTP.sys     Sat Jan 19 01:36:22 2008 (47919A66)
fffffa60`05787000 fffffa60`057af000   srvnet   srvnet.sys   Sat Jan 19 00:56:38 2008 (47919116)
fffffa60`057af000 fffffa60`057cd000   bowser   bowser.sys   Sat Jan 19 00:54:51 2008 (479190AB)
fffffa60`057cd000 fffffa60`057e7000   mpsdrv   mpsdrv.sys   Sat Jan 19 01:35:28 2008 (47919A30)
fffffa60`05a0d000 fffffa60`05a35000   mrxsmb   mrxsmb.sys   Sat Jan 19 00:55:21 2008 (479190C9)
fffffa60`05a35000 fffffa60`05a7e000   mrxsmb10 mrxsmb10.sys Tue Aug 26 21:26:08 2008 (48B4AD30)
fffffa60`05a7e000 fffffa60`05a9d000   mrxsmb20 mrxsmb20.sys Sat Jan 19 00:55:19 2008 (479190C7)
fffffa60`05a9d000 fffffa60`05ace000   srv2     srv2.sys     Sat Jan 19 00:56:40 2008 (47919118)
fffffa60`05ace000 fffffa60`05b62000   srv      srv.sys      Mon Dec 15 22:42:00 2008 (49472388)
fffffa60`05b72000 fffffa60`05bc1000   eamon    eamon.sys    Thu Mar 13 11:38:02 2008 (47D94A5A)
fffffa60`06808000 fffffa60`068be000   peauth   peauth.sys   Mon Oct 23 07:57:00 2006 (453CAE0C)
fffffa60`068be000 fffffa60`068c9000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffffa60`068c9000 fffffa60`068d1000   SSPORT   SSPORT.sys   Thu Aug 11 19:07:32 2005 (42FBDA34)
fffffa60`068d1000 fffffa60`068e0000   tcpipreg tcpipreg.sys Sat Jan 19 01:37:01 2008 (47919A8D)
fffffa60`068e0000 fffffa60`068fc000   cdfs     cdfs.sys     Sat Jan 19 00:53:45 2008 (47919069)
fffffa60`068fc000 fffffa60`06906000   fchwmdr64 fchwmdr64.sys Fri May 09 01:44:25 2008 (4823E4B9)
fffffa60`06948000 fffffa60`06953000   asyncmac asyncmac.sys Sat Jan 19 01:37:27 2008 (47919AA7)
fffffa60`06953000 fffffa60`0695b000   PROCEXP113 PROCEXP113.SYS Mon Nov 03 16:19:45 2008 (490F6AF1)
fffffa60`0695b000 fffffa60`0696b000   usbaapl64 usbaapl64.sys Wed Apr 15 14:58:13 2009 (49E62E45)

Unloaded modules:
fffffa60`06938000 fffffa60`06948000   usbaapl64.sy
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`06923000 fffffa60`06938000   USBSTOR.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`0690e000 fffffa60`06923000   USBSTOR.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`06906000 fffffa60`0690e000   cpuz132_x64.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`05b62000 fffffa60`05b72000   DgiVecp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`011db000 fffffa60`011e9000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`011e9000 fffffa60`011f5000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`011f5000 fffffa60`011fd000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`00d66000 fffffa60`00d79000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`03b8f000 fffffa60`03b99000   kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`02b84000 fffffa60`02b9a000   i8042prt.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
start             end                 module name
fffffa60`02dd6000 fffffa60`02de5f00   1394BUS  1394BUS.SYS  Sat Jan 19 01:34:04 2008 (479199DC)
fffffa60`02ba8000 fffffa60`02bfe000   abd0ex1g abd0ex1g.SYS Sat Nov 18 03:33:22 2006 (455EC552)
fffffa60`00b4f000 fffffa60`00ba5000   acpi     acpi.sys     Sat Jan 19 01:02:45 2008 (47919285)
fffffa60`03912000 fffffa60`0397f000   afd      afd.sys      Sat Jan 19 01:38:15 2008 (47919AD7)
fffffa60`06948000 fffffa60`06953000   asyncmac asyncmac.sys Sat Jan 19 01:37:27 2008 (47919AA7)
fffffa60`00990000 fffffa60`00998000   atapi    atapi.sys    Sat Jan 19 01:28:49 2008 (479198A1)
fffffa60`00998000 fffffa60`009bc000   ataport  ataport.SYS  Sat Jan 19 01:28:52 2008 (479198A4)
fffffa60`02606000 fffffa60`02b52000   atikmdag atikmdag.sys Mon Mar 16 16:42:14 2009 (49BEB9A6)
fffffa60`02d8b000 fffffa60`02dc4000   b57nd60a b57nd60a.sys Mon Feb 26 17:50:43 2007 (45E36443)
fffffa60`057af000 fffffa60`057cd000   bowser   bowser.sys   Sat Jan 19 00:54:51 2008 (479190AB)
fffff960`00690000 fffff960`006a1000   cdd      cdd.dll      unavailable (00000000)
fffffa60`068e0000 fffffa60`068fc000   cdfs     cdfs.sys     Sat Jan 19 00:53:45 2008 (47919069)
fffffa60`02d64000 fffffa60`02d80000   cdrom    cdrom.sys    Sat Jan 19 01:29:04 2008 (479198B0)
fffffa60`006b3000 fffffa60`00765000   CI       CI.dll       Fri Feb 22 00:20:54 2008 (47BE5BB6)
fffffa60`00d3a000 fffffa60`00d66000   CLASSPNP CLASSPNP.SYS Sat Jan 19 01:28:53 2008 (479198A5)
fffffa60`00656000 fffffa60`006b3000   CLFS     CLFS.SYS     Sat Jan 19 00:53:58 2008 (47919076)
fffffa60`03d00000 fffffa60`03d0e000   crashdmp crashdmp.sys Sat Jan 19 01:28:59 2008 (479198AB)
fffffa60`013f6000 fffffa60`01400000   crcdisk  crcdisk.sys  Sat Jan 19 01:30:12 2008 (479198F4)
fffffa60`03c6d000 fffffa60`03ce3000   csc      csc.sys      Sat Jan 19 00:55:39 2008 (479190DB)
fffffa60`03ce3000 fffffa60`03d00000   dfsc     dfsc.sys     Sat Jan 19 00:54:16 2008 (47919088)
fffffa60`013e2000 fffffa60`013f6000   disk     disk.sys     Sat Jan 19 01:29:02 2008 (479198AE)
fffffa60`03893000 fffffa60`038b6000   drmk     drmk.sys     Sat Jan 19 02:20:04 2008 (4791A4A4)
fffffa60`03d1a000 fffffa60`03d22000   dump_atapi dump_atapi.sys Sat Jan 19 01:28:49 2008 (479198A1)
fffffa60`03d0e000 fffffa60`03d1a000   dump_dumpata dump_dumpata.sys Sat Jan 19 01:28:54 2008 (479198A6)
fffffa60`03d22000 fffffa60`03d35000   dump_dumpfve dump_dumpfve.sys Sat Jan 19 00:52:25 2008 (47919019)
fffffa60`03d42000 fffffa60`03d4e000   Dxapi    Dxapi.sys    Sat Jan 19 01:08:00 2008 (479193C0)
fffffa60`02c00000 fffffa60`02cdf000   dxgkrnl  dxgkrnl.sys  Fri Aug 01 21:19:59 2008 (4893B63F)
fffffa60`05b72000 fffffa60`05bc1000   eamon    eamon.sys    Thu Mar 13 11:38:02 2008 (47D94A5A)
fffffa60`03c62000 fffffa60`03c6d000   easdrv   easdrv.sys   Thu Mar 13 11:39:03 2008 (47D94A97)
fffffa60`011af000 fffffa60`011db000   ecache   ecache.sys   Sat Jan 19 01:30:39 2008 (4791990F)
fffffa60`03905000 fffffa60`03912000   epfwtdir epfwtdir.sys Thu Mar 13 11:27:44 2008 (47D947F0)
fffffa60`068fc000 fffffa60`06906000   fchwmdr64 fchwmdr64.sys Fri May 09 01:44:25 2008 (4823E4B9)
fffffa60`02de6000 fffffa60`02df3000   fdc      fdc.sys      Sat Jan 19 01:28:45 2008 (4791989D)
fffffa60`009bc000 fffffa60`009d0000   fileinfo fileinfo.sys Sat Jan 19 01:05:23 2008 (47919323)
fffffa60`00ddf000 fffffa60`00dea000   flpydisk flpydisk.sys Sat Jan 19 01:28:45 2008 (4791989D)
fffffa60`00765000 fffffa60`007ab000   fltmgr   fltmgr.sys   Sat Jan 19 00:54:10 2008 (47919082)
fffffa60`03b66000 fffffa60`03b70000   Fs_Rec   Fs_Rec.SYS   Sat Jan 19 00:53:41 2008 (47919065)
fffffa60`00fcc000 fffffa60`00ff5000   fvevol   fvevol.sys   Sat Jan 19 00:52:29 2008 (4791901D)
fffffa60`01183000 fffffa60`011af000   fwpkclnt fwpkclnt.sys Sat Jan 19 01:36:43 2008 (47919A7B)
fffffa60`02d80000 fffffa60`02d8b000   GEARAspiWDM GEARAspiWDM.sys Thu Mar 19 11:34:13 2009 (49C265F5)
fffff800`01e06000 fffff800`01e4c000   hal      hal.dll      Sat Jan 19 02:55:25 2008 (4791ACED)
fffffa60`02cee000 fffffa60`02d01000   HDAudBus HDAudBus.sys Tue Nov 27 18:24:06 2007 (474CA716)
fffffa60`0380f000 fffffa60`03858000   HdAudio  HdAudio.sys  Wed Nov 01 21:48:10 2006 (45494E5A)
fffffa60`03d73000 fffffa60`03d85000   HIDCLASS HIDCLASS.SYS Sat Jan 19 01:33:52 2008 (479199D0)
fffffa60`03b99000 fffffa60`03ba0b80   HIDPARSE HIDPARSE.SYS Sat Jan 19 01:33:51 2008 (479199CF)
fffffa60`03d6a000 fffffa60`03d73000   hidusb   hidusb.sys   Sat Jan 19 01:33:54 2008 (479199D2)
fffffa60`056ec000 fffffa60`05787000   HTTP     HTTP.sys     Sat Jan 19 01:36:22 2008 (47919A66)
fffffa60`03b79000 fffffa60`03b8f000   i8042prt i8042prt.sys Sat Jan 19 01:28:08 2008 (47919878)
fffffa60`00d79000 fffffa60`00d8c000   intelppm intelppm.sys Sat Jan 19 00:52:45 2008 (4791902D)
fffffa60`0569d000 fffffa60`056c0000   irda     irda.sys     Sat Jan 19 01:36:12 2008 (47919A5C)
fffffa60`02b7b000 fffffa60`02b84000   irenum   irenum.sys   Sat Jan 19 01:36:07 2008 (47919A57)
fffffa60`02b6f000 fffffa60`02b7b000   irsir    irsir.sys    Sat Jan 19 01:36:11 2008 (47919A5B)
fffffa60`02b9a000 fffffa60`02ba8000   kbdclass kbdclass.sys Sat Jan 19 01:28:05 2008 (47919875)
fffffa60`03d85000 fffffa60`03d8f000   kbdhid   kbdhid.sys   Sat Jan 19 01:28:10 2008 (4791987A)
fffffa60`0060b000 fffffa60`00615000   kdcom    kdcom.dll    Sat Jan 19 02:58:25 2008 (4791ADA1)
fffffa60`025cc000 fffffa60`02600000   ks       ks.sys       Sat Jan 19 01:28:24 2008 (47919888)
fffffa60`00c0d000 fffffa60`00c92000   ksecdd   ksecdd.sys   Sat Jan 19 01:16:38 2008 (479195C6)
fffffa60`038b6000 fffffa60`038bb180   ksthunk  ksthunk.sys  Sat Jan 19 01:28:14 2008 (4791987E)
fffffa60`056c0000 fffffa60`056d4000   lltdio   lltdio.sys   Sat Jan 19 01:35:48 2008 (47919A44)
fffffa60`03dad000 fffffa60`03dcf000   luafv    luafv.sys    Sat Jan 19 00:59:06 2008 (479191AA)
fffffa60`00615000 fffffa60`00642000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Jan 19 02:56:17 2008 (4791AD21)
fffffa60`03d9a000 fffffa60`03dad000   monitor  monitor.sys  Sat Jan 19 01:32:34 2008 (47919982)
fffffa60`025be000 fffffa60`025ca000   mouclass mouclass.sys Sat Jan 19 01:28:05 2008 (47919875)
fffffa60`03d8f000 fffffa60`03d9a000   mouhid   mouhid.sys   Sat Jan 19 01:28:10 2008 (4791987A)
fffffa60`0097d000 fffffa60`00990000   mountmgr mountmgr.sys Sat Jan 19 01:28:01 2008 (47919871)
fffffa60`057cd000 fffffa60`057e7000   mpsdrv   mpsdrv.sys   Sat Jan 19 01:35:28 2008 (47919A30)
fffffa60`03dcf000 fffffa60`03df6000   mrxdav   mrxdav.sys   Sat Jan 19 00:55:28 2008 (479190D0)
fffffa60`05a0d000 fffffa60`05a35000   mrxsmb   mrxsmb.sys   Sat Jan 19 00:55:21 2008 (479190C9)
fffffa60`05a35000 fffffa60`05a7e000   mrxsmb10 mrxsmb10.sys Tue Aug 26 21:26:08 2008 (48B4AD30)
fffffa60`05a7e000 fffffa60`05a9d000   mrxsmb20 mrxsmb20.sys Sat Jan 19 00:55:19 2008 (479190C7)
fffffa60`03be6000 fffffa60`03bf1000   Msfs     Msfs.SYS     Sat Jan 19 00:53:55 2008 (47919073)
fffffa60`00ba5000 fffffa60`00baf000   msisadrv msisadrv.sys Sat Jan 19 01:02:50 2008 (4791928A)
fffffa60`00d8c000 fffffa60`00dc4000   msiscsi  msiscsi.sys  Sat Jan 19 01:30:31 2008 (47919907)
fffffa60`00c92000 fffffa60`00ce2000   msrpc    msrpc.sys    Sat Jan 19 01:27:01 2008 (47919835)
fffffa60`00dc4000 fffffa60`00dcf000   mssmbios mssmbios.sys Sat Jan 19 01:02:54 2008 (4791928E)
fffffa60`013d0000 fffffa60`013e2000   mup      mup.sys      Sat Jan 19 00:54:18 2008 (4791908A)
fffffa60`00e09000 fffffa60`00fcc000   ndis     ndis.sys     Sat Jan 19 01:37:13 2008 (47919A99)
fffffa60`0248f000 fffffa60`0249b000   ndistapi ndistapi.sys Sat Jan 19 01:37:22 2008 (47919AA2)
fffffa60`0249b000 fffffa60`024cc000   ndiswan  ndiswan.sys  Sat Jan 19 01:37:33 2008 (47919AAD)
fffffa60`03b52000 fffffa60`03b66000   NDProxy  NDProxy.SYS  Sat Jan 19 01:37:26 2008 (47919AA6)
fffffa60`039e1000 fffffa60`039f0000   netbios  netbios.sys  Sat Jan 19 01:36:35 2008 (47919A73)
fffffa60`0397f000 fffffa60`039c3000   netbt    netbt.sys    Sat Jan 19 01:36:24 2008 (47919A68)
fffffa60`00ce2000 fffffa60`00d3a000   NETIO    NETIO.SYS    Sat Jan 19 01:37:27 2008 (47919AA7)
fffffa60`038bc000 fffffa60`038cd000   Npfs     Npfs.SYS     Sat Jan 19 00:53:57 2008 (47919075)
fffffa60`03c56000 fffffa60`03c62000   nsiproxy nsiproxy.sys Sat Jan 19 01:36:45 2008 (47919A7D)
fffff800`01e4c000 fffff800`02364000   nt       ntkrnlmp.exe Wed Sep 17 22:17:25 2008 (48D1BA35)
fffffa60`01200000 fffffa60`01384000   Ntfs     Ntfs.sys     Sat Jan 19 00:55:29 2008 (479190D1)
fffffa60`03b70000 fffffa60`03b79000   Null     Null.SYS     Thu Nov 02 05:37:15 2006 (4549BC4B)
fffffa60`02dc4000 fffffa60`02dd5a00   ohci1394 ohci1394.sys Sat Jan 19 01:34:08 2008 (479199E0)
fffffa60`039c3000 fffffa60`039e1000   pacer    pacer.sys    Fri Apr 04 21:55:46 2008 (47F6DC22)
fffffa60`00bdf000 fffffa60`00bf4000   partmgr  partmgr.sys  Sat Jan 19 01:29:14 2008 (479198BA)
fffffa60`00baf000 fffffa60`00bdf000   pci      pci.sys      Sat Jan 19 01:02:57 2008 (47919291)
fffffa60`00bf4000 fffffa60`00bfb000   pciide   pciide.sys   Thu Nov 02 05:38:14 2006 (4549BC86)
fffffa60`0096d000 fffffa60`0097d000   PCIIDEX  PCIIDEX.SYS  Sat Jan 19 01:28:53 2008 (479198A5)
fffffa60`06808000 fffffa60`068be000   peauth   peauth.sys   Mon Oct 23 07:57:00 2006 (453CAE0C)
fffffa60`03858000 fffffa60`03893000   portcls  portcls.sys  Sat Jan 19 01:33:58 2008 (479199D6)
fffffa60`06953000 fffffa60`0695b000   PROCEXP113 PROCEXP113.SYS Mon Nov 03 16:19:45 2008 (490F6AF1)
fffffa60`00642000 fffffa60`00656000   PSHED    PSHED.dll    Sat Jan 19 02:58:13 2008 (4791AD95)
fffffa60`03bf1000 fffffa60`03bfa000   rasacd   rasacd.sys   Sat Jan 19 01:37:30 2008 (47919AAA)
fffffa60`0246c000 fffffa60`0248f000   rasl2tp  rasl2tp.sys  Sat Jan 19 01:37:33 2008 (47919AAD)
fffffa60`024cc000 fffffa60`024dc000   raspppoe raspppoe.sys Sat Jan 19 01:37:30 2008 (47919AAA)
fffffa60`024dc000 fffffa60`024fa000   raspptp  raspptp.sys  Sat Jan 19 01:37:34 2008 (47919AAE)
fffffa60`024fa000 fffffa60`02512000   rassstp  rassstp.sys  Sat Jan 19 01:37:42 2008 (47919AB6)
fffffa60`03c08000 fffffa60`03c56000   rdbss    rdbss.sys    Sat Jan 19 00:55:09 2008 (479190BD)
fffffa60`03bd4000 fffffa60`03bdd000   RDPCDD   RDPCDD.sys   Sat Jan 19 01:42:04 2008 (47919BBC)
fffffa60`02512000 fffffa60`025ac000   rdpdr    rdpdr.sys    Sat Jan 19 01:43:38 2008 (47919C1A)
fffffa60`03bdd000 fffffa60`03be6000   rdpencdd rdpencdd.sys Sat Jan 19 01:42:03 2008 (47919BBB)
fffffa60`056d4000 fffffa60`056ec000   rspndr   rspndr.sys   Sat Jan 19 01:35:48 2008 (47919A44)
fffffa60`03a07000 fffffa60`03b51800   RTKVHD64 RTKVHD64.sys Thu Feb 14 04:03:02 2008 (47B403C6)
fffffa60`00b21000 fffffa60`00b4f000   SCSIPORT SCSIPORT.SYS Sat Jan 19 01:28:52 2008 (479198A4)
fffffa60`068be000 fffffa60`068c9000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffffa60`02df3000 fffffa60`02dff000   serenum  serenum.sys  Sat Jan 19 01:28:36 2008 (47919894)
fffffa60`02b52000 fffffa60`02b6f000   serial   serial.sys   Sat Jan 19 01:28:41 2008 (47919899)
fffffa60`038ea000 fffffa60`03905000   smb      smb.sys      Sat Jan 19 01:36:17 2008 (47919A61)
fffffa60`013c8000 fffffa60`013d0000   spldr    spldr.sys    Thu Jun 21 20:57:56 2007 (467B1E94)
fffffa60`05603000 fffffa60`0569d000   spsys    spsys.sys    Thu Jun 21 21:02:05 2007 (467B1F8D)
fffffa60`00a06000 fffffa60`00b18000   sptd     sptd.sys     Sun Nov 19 12:18:45 2006 (456091F5)
fffffa60`05ace000 fffffa60`05b62000   srv      srv.sys      Mon Dec 15 22:42:00 2008 (49472388)
fffffa60`05a9d000 fffffa60`05ace000   srv2     srv2.sys     Sat Jan 19 00:56:40 2008 (47919118)
fffffa60`05787000 fffffa60`057af000   srvnet   srvnet.sys   Sat Jan 19 00:56:38 2008 (47919116)
fffffa60`068c9000 fffffa60`068d1000   SSPORT   SSPORT.sys   Thu Aug 11 19:07:32 2005 (42FBDA34)
fffffa60`02402000 fffffa60`0245f000   storport storport.sys Sat Jan 19 01:29:09 2008 (479198B5)
fffffa60`025ca000 fffffa60`025cb480   swenum   swenum.sys   Thu Nov 02 05:37:33 2006 (4549BC5D)
fffffa60`0100f000 fffffa60`01183000   tcpip    tcpip.sys    Sat Apr 26 02:33:23 2008 (4812CCB3)
fffffa60`068d1000 fffffa60`068e0000   tcpipreg tcpipreg.sys Sat Jan 19 01:37:01 2008 (47919A8D)
fffffa60`0245f000 fffffa60`0246c000   TDI      TDI.SYS      Sat Jan 19 01:38:11 2008 (47919AD3)
fffffa60`038cd000 fffffa60`038ea000   tdx      tdx.sys      Sat Jan 19 01:36:53 2008 (47919A85)
fffffa60`025ac000 fffffa60`025be000   termdd   termdd.sys   Sat Jan 19 01:42:03 2008 (47919BBB)
fffff960`004a0000 fffff960`004aa000   TSDDD    TSDDD.dll    unavailable (00000000)
fffffa60`00ff5000 fffffa60`00ffe000   tunmp    tunmp.sys    Sat Jan 19 01:36:30 2008 (47919A6E)
fffffa60`01000000 fffffa60`0100c000   tunnel   tunnel.sys   Sat Jan 19 01:36:44 2008 (47919A7C)
fffffa60`00dcf000 fffffa60`00ddf000   umbus    umbus.sys    Sat Jan 19 01:34:16 2008 (479199E8)
fffffa60`0695b000 fffffa60`0696b000   usbaapl64 usbaapl64.sys Wed Apr 15 14:58:13 2009 (49E62E45)
fffffa60`03d4e000 fffffa60`03d6a000   usbccgp  usbccgp.sys  Sat Jan 19 01:34:04 2008 (479199DC)
fffffa60`03d40000 fffffa60`03d41e00   USBD     USBD.SYS     Sat Jan 19 01:33:53 2008 (479199D1)
fffffa60`02d53000 fffffa60`02d64000   usbehci  usbehci.sys  Sat Jan 19 01:33:57 2008 (479199D5)
fffffa60`007ab000 fffffa60`007f2000   usbhub   usbhub.sys   Sat Jan 19 01:34:13 2008 (479199E5)
fffffa60`02d0d000 fffffa60`02d53000   USBPORT  USBPORT.SYS  Sat Jan 19 01:34:00 2008 (479199D8)
fffffa60`03d35000 fffffa60`03d40000   usbprint usbprint.sys Sat Jan 19 02:10:56 2008 (4791A280)
fffffa60`02d01000 fffffa60`02d0d000   usbuhci  usbuhci.sys  Sat Jan 19 01:33:56 2008 (479199D4)
fffffa60`03ba1000 fffffa60`03baf000   vga      vga.sys      Sat Jan 19 01:32:21 2008 (47919975)
fffffa60`03baf000 fffffa60`03bd4000   VIDEOPRT VIDEOPRT.SYS Sat Jan 19 01:32:25 2008 (47919979)
fffffa60`008f3000 fffffa60`00907000   volmgr   volmgr.sys   Sat Jan 19 01:29:12 2008 (479198B8)
fffffa60`00907000 fffffa60`0096d000   volmgrx  volmgrx.sys  Sat Jan 19 01:29:45 2008 (479198D9)
fffffa60`01384000 fffffa60`013c8000   volsnap  volsnap.sys  Sat Jan 19 01:29:47 2008 (479198DB)
fffffa60`009d0000 fffffa60`009eb000   wanarp   wanarp.sys   Sat Jan 19 01:37:35 2008 (47919AAF)
fffffa60`02cdf000 fffffa60`02cee000   watchdog watchdog.sys Sat Jan 19 01:07:23 2008 (4791939B)
fffffa60`0080b000 fffffa60`008e5000   Wdf01000 Wdf01000.sys Sat Jan 19 01:33:27 2008 (479199B7)
fffffa60`008e5000 fffffa60`008f3000   WDFLDR   WDFLDR.SYS   Sat Jan 19 01:32:33 2008 (47919981)
fffff960`00090000 fffff960`00341000   win32k   win32k.sys   unavailable (00000000)
fffffa60`00b18000 fffffa60`00b21000   WMILIB   WMILIB.SYS   Sat Jan 19 01:33:45 2008 (479199C9)

Unloaded modules:
fffffa60`06938000 fffffa60`06948000   usbaapl64.sy
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`06923000 fffffa60`06938000   USBSTOR.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`0690e000 fffffa60`06923000   USBSTOR.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`06906000 fffffa60`0690e000   cpuz132_x64.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`05b62000 fffffa60`05b72000   DgiVecp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`011db000 fffffa60`011e9000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`011e9000 fffffa60`011f5000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`011f5000 fffffa60`011fd000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`00d66000 fffffa60`00d79000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`03b8f000 fffffa60`03b99000   kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`02b84000 fffffa60`02b9a000   i8042prt.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Bugcheck code 0000003B
Arguments 00000000`c0000005 fffff800`01eaeb22 fffffa60`0e452d40 00000000`00000000
 

My Computer

System One

thanks for the reply. I know i sounded a bit rude in the last post, but this is a vista forum, and i got help within the hour from a different site with far less members. It was just a bit frustrating.

anyway. In regards to the troubleshooting list.
I stopped overclocking a while ago and i thought these errors had stopped
all fans are working properly and all temps are within normal range
I have run memtests and my memory hasn't shown any faults.
You have my crash dump from the previous crash.
I have a very good antivirus and it is up to date, no viruses or spyware here.

I have downloaded new lan, chipset, and video drivers and will install them soon. I will also contact foxconn techs and have them do a bios update for me over the phone, so that my warranty isn't voided.

Also, can you explain what those files that end in .sys are. I searched them and some come back as spyware, some don't come back, and others just confuse me.

Last thing, I have the windows debugging tools, but i cannot make heads or tails of them. I have no idea what that analysis actually means.
 

My Computer

System One

While you may have a very good antivirus, it is advised that you scan with an independent scanner to ensure that it isn't a virus causing this (and that has gotten behind your current protection to provide false results). I do not suspect a virus at this point, but corruption of the Winsock stack is a favored trick of malware writers.

BIOS updates usually aren't necessary if you're not having problems that relate to the fixes described in the BIOS changelog. It can't hurt if done properly, but if done improperly it can turn your system into a brick.

The files that end in .sys are the driver files on your system that I found with dates from 2007 and earlier. Unless you're infected you can ignore the spyware/malware chatter surrounding them - and focus on what those files do when they're not infected.

For example, a google for abd0ex1g.SYS reveals only one result. That's normally suspicious - which is further evidence for an independent malware scan. You can also submit the file to Jotti's malware scan for an online analysis of it. You can also view the properties of that file to see if it gives any clues as to who wrote it.

The HDAudBus.sys is likely related to your Audio drivers due to the filename. A google for it reveals that it is the High Definition Audio Bus driver.

The b57nd60a.sys file shows (on a google search), the first hit relates to spyware, but the second if from IBM/Lenovo. In that page they refer to the Broadcom NetXtreme Fast Ethernet - so that would be your networking driver.

The HdAudio.sys is related to the HdAudBus.sys driver above.

The SSPort.sys driver was a difficult one, but it's a Port Contention Driver from Samsung. It's likely associated with some sort of hardware that you've got installed - so you'll have to look around to see what's using it.

Here's my explanation of how to use the Debugging Tools: Diagnosing Bsod's (originally posted 02Oct08) - Vox And at the bottom of it is a brief description of what I do when trying to analyze a report.

Please post back with any BSOD's that you get. If we go a week without them, then it's usually safe to say that it's fixed.
 

My Computer

System One

usasma, thanks for the great advice. But i did read up on using windows debugging tools during my previous issues with this machine. (all solved now) And my confusion isn't about how to get the analysis, it is what to do with it. I don't actually understand what it means, where the important info is, or how any of the information is relevant to my problem. Your posts are very insightful and helpful, but not for me since my level of understanding requires a bit of handholding.

Also, again in reference to those .sys files. none of them turn up in a search of my c drive. How am i supposed to submit them for analysis, or look at properties to see who wrote/uses the file? Why do they not exist on my machine?

Finally, in regards to your suggestion for an online scan. You actually provided a link to the exact software I have, Nod32. I am highly doubtful of this being a spyware issue, because my online behavior hasn't changed for a few months, but the big change was putting in new ram. And that is when I got these problems. Plus the online scans you offered aren't nearly as reliable as a full antivirus suite, so I don't see how they will help me much.

antihiatus, can you elaborate on the software you want me to get? did you mean anti rootkit or is this something entirely different. can you please provide a link so i know exactly which one you suggest i get?
 

My Computer

System One

BSOD analysis is a lot of work, and requires a lot of experience.
And, the more experience you get, the more you realize that you don't know!

Ask questions!!! That's the only way to learn how to do this. I've been struggling to learn BSOD's for several years now and still have a ways to go.

Those .sys files are on your hard drive - otherwise they wouldn't have turned up as being loaded modules in the memory dump. Most times drivers are located in the C:\Windows\System32\Drivers folder. I'm not a great fan of the new search feature in Vista, especially with the default to only search in indexed locations (and the drivers probably won't be indexed).

As for the antivirus scans, I can only recommend what I've found in the past. And I've found that some viruses will corrupt the onboard anti-virus/anti-spyware applications and cause them to give false results. The only way around this is to use a scanner that's not dependent upon stuff that's installed on your system. And there's only 3 ways that I know to ensure that this hasn't happened with a system:
- slaving the hard drive to another system with a known good antivirus and scanning it
- running a portable antivirus scanner from a flash drive or other removable media
- running a scan from an online provider.

We are not looking to clean the system, or to detect everything possible on the system. The only point of this scan is to see if an infection exists that has bypassed your onboard protection. If that's the case, I then refer you to the malware experts and halt work on your BSOD issues until you've been cleaned.

You can choose to do what you want with your system. If you want my advice, then I'll give it. And, now that you mention it, I've got a thing about antivirus suites.

I just spent 6 days troubleshooting a system (with Winsock issues) and couldn't get the system to connect to the internet. I removed some viruses from it and performed numerous repairs on the system - and still couldn't connect. Finally, out of desperation, I removed the Internet Security suite that was installed. Instantly all was well and I could connect normally.

This isn't the first time that this has happened to me, but it has convinced me to discourage the use of Internet Security suites from any manufacturer. I've had these difficulties with Norton, McAfee, Kaspersky, ESET, and NOD32 suites - and it's a royal pain spending days troubleshooting something with no evidence of issues from the Internet Security suite.

Your system, your choice.
 

My Computer

System One

I didn't mean to sound ungrateful here, but I really can't agree with your stance on antivirus. Nod32 has never given me any trouble and is far better than any online antivirus, though i do have the most expensive version on my machine.

I tried one of the ones from your list and it couldn't even be initialized.

Anyway, I had some other people look at the crash dump analysis and they also suggested that I reinstall my LAN driver, so that is what I have done. I suppose this issue can be left alone for the moment, and I will def post again If i have any issues, though I hope to be upgrading to windows 7 soonish, so hopefully there won't be many problems.
 

My Computer

System One

You must log in or register to reply here.
Back
Top